low2.6
CVE-2005-1923
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU c…
Impact
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clam Anti-Virus | Clamav | Versions 0.83, 0.84_rc1, 0.84_rc2, 0.85, 0.85.1 |